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CLAIMS 

1. Group signature system enabling a member (M) of a group 
(G) to produce a message (m) accompanied by a signature (s) 
proving to a checker (2, 4) that the said message 
originates from a member of this group (G) , using a 

5 personalized data (z; Kz) , 

characterised in that the said personalized data is in a 
form integrated into an electronic hardware support (26) . 

2. System according to claim 1, characterized in that the 
10 said electronic hardware support (26) includes encryption 

means (B3) to make a personalized encrypted text (C) using 
the said personalized data (z; Kz) before the signature S 
of the message (m) . 

3. System according to claim 2, characterized in that the 
said electronic hardware support (26) includes means (B5) 
of making a combination of a message (m) to be signed and 
the encrypted text C associated with this message, in the 
form of a concatenation of the message m with the encrypted 
text (C) . 

4. System according to any one of claims 1 to 3, 
characterized in that the said electronic hardware support 
(26) also includes means (B6) of signature (Sig) of the 

25 message (m) with the personalized data (z; Kz) in encrypted 
form associated with this message (C) . 
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5. System according to any one of claims 2 to 4, 
characterized in that the said personalized data is an 
identifier (z) personal to the member (M) , and in that the 
said electronic hardware support (26) also includes an 

5 encryption key (K) common to all members of the group (G) , 
and encryption means (B3) to encrypt (C) the identifier 
with the said encryption key. 

6. System according to claim 5, characterized in that 
10 encryption means (B3) encrypt (C) the identifier and a 

random number (r) . 

7. System according to any one of claims 2 to 4, 
characterized in that the said personalized data is a 

15 diversified encryption key (Kz) specific to each member (M) 
of the group (G) , and in that encryption means (B3) make an 
encryption (C) using at least one data (r) with the said 
encryption key. 

20 8. System according to claim 7, characterized in that the 
said data includes a random number (r) . 

9. System according to any one of claims 2 to 8, 
characterized in that the encryption means (B3) use a 
25 secret key encryption algorithm (K) , for example the 
algorithm known as AES (advanced encryption standard) . 



10. System according to any one of claims 2 to 8, 
characterized in that the encryption means (B3) use a 



public key encryption algorithm, for example the algorithm 
known as RSA (Rivest, Shamir, Adleman) . 

11. System according to any one of claims 4 to 10, 
characterized in that means (B6) of signature (Sig) use a 
private key signature algorithm (SK) , for example the 
algorithm known as RSA (Rivest, Shamir, Adleman) . 

12. System according to claim 11, characterized in that the 
signature algorithm is of the RSA type and includes the 
said PKCS#1 standard as defined particularly in the 
document "RSA Cryptography Standard - RSA Laboratories - 
Draft 2 - January 5 2001". 

13. System according to any one of claims 1 to 12, 
characterized in that it is a portable communicating device 
(26) . 

14. System according to claim 13, characterized in that it 
is a smart card (26) . 

15. Method for sending a message (m) with a group (G) 
signature (S) of this message, characterized in that it 
uses the system according to any one of claims 1 to 14, the 
signature of the message (m) being produced with a private 
key (SK) common to members (M) of the group (G) and 
integrating the personalized data (z; Kz) produced from the 
electronic hardware support (26), the method providing 
means of transmitting the message thus signed to a checker 
(2, 6) without needing to supply proof to the checker that 



the member (M) belongs to the said group (G) , such as a 
member certificate or proof of possession of such a 
certificate. 

16. Method for checking a message (m) received with a group 
signature for this message, the message having been sent in 
accordance with claim 15, characterized in that the check 
is made using a public key corresponding to the said 
private key (SK) . 

17. Method for opening a signature (S) produced by the 
system according to any one of claims 1 to 14, 
characterized in that it comprises steps consisting of: 

- making correspondence data between the identities of 
members (M) of the group (G) and their personalized data 
available, before the signature; 

- decrypting the personalized data received from an 
electronic hardware support (26) for which the signature is 
to be opened; and 

- making the decrypted personalized data correspond to 
the identity of the member (M) of the group (G) . 

18. Method for preparation of an electronic hardware 
support (26) for the system according to any one of claims 
1 to 14, personalized to a member (M) accepted into a 
group, characterized in that it comprises steps consisting 
of: 

- producing the personalized data (z; Kz) to be used 
for the said electronic hardware support (26) to be 
personalized; and 



- registering this personalized data with a private 
signature key (SK) in the said support. 



